diff --git a/modules/containers/jitsi.nix b/modules/containers/jitsi.nix index e4f5915..066f8c2 100644 --- a/modules/containers/jitsi.nix +++ b/modules/containers/jitsi.nix @@ -4,7 +4,6 @@ let workDir = "/srv/containers/jitsi"; in { - # --- directories --- systemd.tmpfiles.rules = [ "d ${workDir}/web 2775 root admin -" "d ${workDir}/prosody 2775 root admin -" @@ -12,7 +11,16 @@ in "d ${workDir}/jvb 2775 root admin -" ]; - # --- containers --- + systemd.targets.jitsi = { + description = "Jitsi containers"; + wants = [ + "podman-jitsi-web.service" + "podman-jitsi-prosody.service" + "podman-jitsi-jicofo.service" + "podman-jitsi-jvb.service" + ]; + }; + virtualisation.oci-containers.containers = { jitsi-web = { @@ -36,6 +44,8 @@ in image = "docker.io/jitsi/prosody:stable"; autoStart = true; + hostname = "xmpp.meet.jitsi"; # Shit doesn't work otherwise + environmentFiles = [ config.age.secrets.jitsi-env.path ]; diff --git a/secrets/jitsi-env.age b/secrets/jitsi-env.age index 2a20dc1..e408801 100644 --- a/secrets/jitsi-env.age +++ b/secrets/jitsi-env.age @@ -1,21 +1,21 @@ -----BEGIN AGE ENCRYPTED FILE----- -YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFA5bEdnQSBRcGxk -TEZvTWh2YlhCOXYwUC9ON1ZhalJZR3VPSG1nYlRpMkoyczdFZ0U0CmZSemRvYjJk -S0ZXaVMxeVB1MlQ1N2hRaXUwUk1IT09wanpSMVo3MHQvK1kKLT4gc3NoLWVkMjU1 -MTkgS0tuNDVBIDRWZzBaTE93UGE2Q08rK3BRVHdURWw2bXpIZVdYZEZGa3Mzc0Rq -K1NHREEKdWlUaURIbmVFVlJJaDd6OXhHbTRKVnU4VnFlMk5MeTBySXZaaWpsYlBN -bwotPiBqOXpgWzltLWdyZWFzZSBTIFQqeExJKgplM0Y5L3NwaW5zeTVveU4vaXNs -RGpnVlc0QktTMy80b1ZnbUlWUTg5UHp3dHJBCi0tLSA3QjFZZlhINmg2QVBXOHZ0 -NThZZHJndlNjSDdlaWNMRGVQN0RlNVQrNWZRCqJkd2wk49REJDgGhlA5FbLtdL4m -04VfJ6xnICCSXmpuSsVm5ckZdLJUc82AzWzozoDUjRiBUSBxvzOIIE/9f+56TJh3 -JsSwfGRu47RcmvcTfhp9tmDupJM6n4QTUDbYSV/RfWeciCY7VUXjU9/GTnECb8Ru -IYfCn/6prp3owdQKuzeys2ZVnlwDMZOCECE4Z+1QdrVJ21chSO4svCBoSkEPhPu5 -KnN0cQqvqEc5frSsVwqmVIoWaD42K0dCN5oDcQK5QIWADkYpUufD5POBHO3SyimA -ICBtIJMXJkjUf20RihpD5GtluOOaTvCVQognGTPQhPEotHfvOVFBZ9OLYEIodOqV -dY9r5AbxRi3T687sm7ktaaQLGCwVJG/kT/fLiFMrUt9ovhAgShPdVOyF5RRDk7iP -hz4JLHiy5TipuUaFnijes4KQoiYwRk8p/Mfrijb9aeUaXdZjVxAGMTAHBnjWZvsl -ecZIPWk5P3JmILu8iVEPjKam9xJDHVk+JSbZH300ehcv5+VackOtr56nTL5iIcrp -w5qNfT8wU4pmy8pDQDpcH0HZa6YVZXHmXI5FKm5sqpneNr+zCOjaTvM4C1O0s1p1 -k6LCbEp7yuKmRco6SblpHH4B0lY7cQu/5wgL6k/OrjQ5wkSMD3El1VVGLGXeYIy8 -A/7EbqTbqlAYh4r7RRIaBSlVDnhQ/g== +YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFA5bEdnQSBBWjk4 +UkJiY1JJdlY5ZU5DU0UrNktTTytFWWF6Q1lhOU9MTGxHeVpvT240CkFhVzgva3BV +alJxMnh4RitQWFMzVXlJV3Fja1FhOUU4RCtHdzNYRmVSNU0KLT4gc3NoLWVkMjU1 +MTkgS0tuNDVBIENRaVplU2UrTHpocndGQTJOS0V0R1VJOG5meG9FNldjYXgwbml6 +MWE0MFUKRkEySkoyZ3B3VXJiSVhJdzhxamdnQ1craGNRVWJtR1JhdHdtMHNSMkho +bwotPiA1dz02ZS1ncmVhc2UgTUhJdyBgbzZSMiBEeFBRdgpLckhTNmVIb2djTWVO +SmZlR3JoN25PT1lBMFdpa3VrclhDVDVuS0JMNWE4YkN0Nk5hVXA2SEovcDRWQlQ2 +QjVMCndMK2Q1M0FsOHlWY0pCT1U0azRlcXpwQWVTVEMxNkZsdDVvWDBEd0NBR09h +OVl4MDU1Z01SYlBoQjc0Ci0tLSBuVnh4MXJmUDg1ZC9DQXRzWVRCZUFDVTVOMXBn +Y21DZ2orUDJQbGhMdlNFCqjt7i6svbC10M4ElgZ9WGkrcM9nATwn6QplcNka5k0X +ByWdzXxPjYoxoaLDBynQ0X1R0/ujlYHYUVDmhtiepu3Boaj/LymYX+i0jcSnaAfo +iBp5KUc8KjQExsrQ2YGQGG8QHGOQ09Ef07C3Eatfk6+dTRaeOEkMZ2BVbB6xdB0z +40q3QXCaGSCLRHDp/ZScVhwjcNzMI479jYZImnbpls8GVc5LhbDaKT9I3mcCgbx8 +z23slQHryo6iJ+HT5IjQwQAtt+MJV0cJZfVoq6f+CKwQ9jKx2wJXNzJfr6d5TiNO +bmaxuVDsSDs2ld5WEmlF5zj2b0Tg0tk5S0s598hxHGlFsMTwHP89OFg9xSH77koD +QQCqqi6OhnDaAVTqTVAodO19pG1G+UoR7dFkzn6SY/4fyEb4eQSKLEd039roP2W1 +jCL0+GpyqUTsXfmCJ9Jl/eKNSfMB85oYQvmoG3QqdO/VfpYzE1P0ozf+G8wSPnXH +w41npUZndaXkBoC2FDJU6NbRTVp+GQcD51/TyMJH+Lcy+JiMOsUHic46VdlQJ927 +P6srLP2+6gs= -----END AGE ENCRYPTED FILE-----